Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,627
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,307 recordsRanked by popularity · browse by tag · record statistics
npm
31At Riskhealth index
Automattic/cli-table
Pretty unicode tables for the CLI with Node.JS
JavaScript★ 2,296↓ 18M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
php-fig/event-dispatcher
No repository description published.
PHP★ 2,284↓ 18.3M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
globocom/m3u8
Python m3u8 Parser for HTTP Live Streaming (HLS) Transmissions
Python★ 2,276Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
macournoyer/thin
A very fast & simple Ruby web server
Ruby · C★ 2,274Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
spring-attic/spring-retry
No repository description published.
Java★ 2,268Aug 21, 2026
Custom licenseAug 21, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pyscaffold/pyscaffold
🛠 Python project template generator with batteries included
Python★ 2,264↓ 1M/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
image-size/image-size
Node module for detecting image dimensions
TypeScript★ 2,230↓ 138M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems
38Weakhealth index
galetahub/ckeditor
Ckeditor 4.x integration gem for rails
Ruby · JavaScript★ 2,224Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
npm
21At Riskhealth index
plurals/pluralize
Pluralize or singularize any word based on a count
JavaScript★ 2,215Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Packagist
18Criticalhealth index
sebastianbergmann/phpcpd
Copy/Paste Detector (CPD) for PHP code.
PHP★ 2,211↓ 376.3K/moAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
RubyGems
48Weakhealth index
thoughtbot/shoulda
Makes tests easy on the fingers and the eyes
Ruby★ 2,204Aug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
npm
25At Riskhealth index
evanw/node-source-map-support
Adds source map support to node.js (for stack traces)
JavaScript★ 2,192↓ 530M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Maven
32At Riskhealth index
hamcrest/JavaHamcrest
Java (and original) version of Hamcrest
Java★ 2,187Jul 28, 2026
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
19Criticalhealth index
dotnet/pinvoke
A library containing all P/Invoke code so you don't have to import it every time. Maintained and updated to support the latest Windows OS.
C#★ 2,182Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
npm
17Criticalhealth index
dominictarr/event-stream
EventStream is like functional programming meets IO
JavaScript★ 2,175↓ 24.4M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems
55Moderatehealth index
rubyconfig/config
Easiest way to add multi-environment yaml settings to Rails, Sinatra, Padrino and other Ruby projects.
Ruby · HTML★ 2,168Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
jazzband/django-widget-tweaks
Tweak the form field rendering in templates, not in python-level form definitions. CSS classes and HTML attributes can be altered.
Python★ 2,163Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
26At Riskhealth index
Antaris/RazorEngine
Open source templating engine based on Microsoft's Razor parsing engine
C#★ 2,162Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
gabrielfalcao/HTTPretty
Intercept HTTP requests at the Python socket level. Fakes the whole socket module
Python★ 2,162↓ 965.2K/moJul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
Hex
28At Riskhealth index
bitwalker/libcluster
Automatic cluster formation/healing for Elixir applications
Elixir★ 2,155↓ 391.7K/moJul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
19Criticalhealth index
leanprover/lean3
Lean Theorem Prover
C++ · Lean★ 2,155Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 2.10.0
PyPI · crates.io
30At Riskhealth index
wasmerio/wasmer-python
🐍🕸 WebAssembly runtime for Python
Rust · Python★ 2,149↓ 1M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
32At Riskhealth index
taylorhakes/promise-polyfill
Lightweight ES6 Promise polyfill for the browser and node. A+ Compliant
JavaScript★ 2,142↓ 21.7M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
25At Riskhealth index
alexei/sprintf.js
sprintf.js is a complete open source JavaScript sprintf implementation
JavaScript★ 2,140↓ 385M/moAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
Go
26At Riskhealth index
cespare/xxhash
A Go implementation of the 64-bit xxHash algorithm (XXH64)
Go · Assembly★ 2,137Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
npm
59Moderatehealth index
kubeshop/monokle
Monokle is a set of OSS tools designed to help create and maintain high-quality Kubernetes configurations throughout the application lifecycle
TypeScript★ 2,137Jul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
npm
12Criticalhealth index
davidbau/seedrandom
seeded random number generator for Javascript
JavaScript · HTML★ 2,131↓ 32.6M/moAug 13, 2026
No licenseAug 13, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
GongRzhe/Office-Word-MCP-Server
A Model Context Protocol (MCP) server for creating, reading, and manipulating Microsoft Word documents. This server enables AI assistants to work with Word documents through a standardized interface, providing rich document editing capabilities.
Python★ 2,117Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0